Privacy Policy

1. Who We Are

This Privacy Policy explains how personal data is collected, used, and processed when you use mineschematic.com (the "Site").

Data controller: MineSchematic, operating from the United Kingdom.

Contact (email only): [email protected]

2. Scope of This Policy

This Policy applies to all personal data collected through the Site and related services, including account creation, user content, moderation, and technical systems.

The Services are intended for users aged 13 or older. We do not knowingly collect personal data from children under 13.

3. Legal Bases and Purposes of Processing

We process personal data on the following bases:

• Contractual necessity: to provide core Services such as account creation and authentication;
• Legitimate interests: to secure the platform, prevent abuse, provide hosting of user content, and improve Service performance;
• Legal obligations: to comply with applicable laws and respond to valid legal requests.

4. User Authentication (Auth0)

Authentication is handled by Auth0. We do not directly process or store passwords. Auth0 manages login sessions via secure, HTTP-only cookies and returns an authenticated identifier (user ID) and email for account use. Social login options (e.g., Google, GitHub, Apple) are subject to the privacy policies of those providers.

5. Account Data We Store

We store the following in our database:

• Auth0 user identifier
• Email address
• Username
• Account creation timestamp
• Account status flags (e.g., verified creator)
• Connected social profile references

Usernames can be changed; email changes are managed via Auth0.

6. User-Generated Content

User Content includes uploaded files, screenshots, descriptions, comments, tags, etc. Content may be public or private based on user settings. Content may remain archived or visible after account deletion if required for security, abuse prevention, or legal obligations.

7. Automated Content Scanning and Moderation

We use automated systems for:

• Antivirus and malware scanning via external ClamAV-based APIs, MalwareBazaar, and OPSWAT MetaDefender;
• SafeSearch image moderation via Google Cloud Vision;
• Profanity and text analysis.

To ensure the safety of our platform, files and file metadata (such as hashes) you upload may be securely transmitted to third-party cybersecurity and threat intelligence providers for automated analysis. Scan results may be stored as violation metadata, and automated actions may include blocking, deletion, or restriction without manual review.

8. Technical Logs and Data

We collect technical data such as IP addresses, timestamps, and request metadata for security, abuse prevention, and Service operation. Logs may be retained beyond account deletion for legitimate operational needs.

9. Analytics

We use two analytics services:

• Vercel Web Analytics: A privacy-focused analytics service that does not set cookies or collect identifiers that track users across different sites.
• Google Analytics 4: A service provided by Google that uses cookies to collect aggregated data about site usage, such as pages visited, time on site, and general geographic region.

Google Analytics runs with Google Consent Mode. Analytics cookies are only set after you grant consent through our consent management platform (provided by Mediavine); for visitors in the EU/UK this requires your explicit consent, and until then Google Analytics collects only limited, cookieless measurement signals. You can change your choice at any time using the "Update Privacy Settings" option on the site.

9a. Advertising

We monetise the Site through advertising partners. These partners may place and read cookies on your browser, use web beacons, and collect IP addresses and similar identifiers in order to serve you relevant advertisements.

• Mediavine (Grow): We use Mediavine's Grow platform, which may set cookies for ad-related purposes. See Mediavine's Privacy Policy for details.

Advertising cookies are only set after you grant consent through our consent management platform (provided by Mediavine). EU/UK visitors are always asked for consent before any advertising cookies are set, and can change their choice at any time via the "Update Privacy Settings" option.

9b. Mediavine Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a “device”) by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, “Tags”) may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser’s cache. The "help" feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser’s cache. For more information about cookies and how to disable them, you can consult the information at All About Cookies.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

• IP Address
• Operating System type
• Operating System version
• Device Type
• Language of the website
• Web browser type
• Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor’s referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit National Advertising Initiative opt out page. You may also visit Digital Advertising Alliance website and Network Advertising Initiative website to learn more information about interest-based advertising. You may download the AppChoices app at Digital Advertising Alliance’s AppChoices app to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please visit Mediavine Partners.

10. CAPTCHA and Abuse Prevention

We use Cloudflare Turnstile CAPTCHA to detect bots and prevent abuse. This involves processing signals such as browser and device information to determine legitimacy.

11. Cookies and Similar Technologies

We use the following categories of cookies:

• Essential cookies: Authentication cookies (managed by Auth0) required for service functionality.
• Analytics cookies: Google Analytics cookies (_ga, _ga_*) to understand how visitors use our site. For EU/UK visitors, these are only set after consent is given.
• Advertising cookies: Cookies placed by Mediavine Grow to serve relevant advertisements. These are only set after consent is given.

You can accept or decline non-essential cookies through our consent management platform (provided by Mediavine), and change your choice at any time via the "Update Privacy Settings" option. Declining prevents analytics and advertising cookies from being set.

12. Third-Party Processors

We rely on third parties to provide infrastructure and services, including:

• Auth0 (authentication and identity)
• Vercel (hosting and analytics)
• Google Analytics (website analytics)
• Mediavine programmatic advertising and Grow (may set ad-related cookies)
• Cloudflare (R2 storage, CAPTCHA)
• Neon/PostgreSQL (database)
• Google Cloud Vision (image moderation)
• ClamAV API, MalwareBazaar, and OPSWAT MetaDefender (malware scanning and threat intelligence)

These providers operate under their own privacy policies and contractual obligations. Some may process data outside the UK/EU.

13. International Data Transfers

Because some third parties process data outside the UK/EU (such as in the United States), data transfers rely on appropriate protections provided by those services and applicable law.

14. Data Retention

We retain personal data only as long as necessary to provide Services and meet legal and security obligations. Moderation and abuse logs may be retained longer for legitimate interests.

15. Your Rights

Depending on your jurisdiction, you may have rights under applicable laws to:

• Access your data;
• Correct inaccuracies;
• Request deletion;
• Restrict processing;
• Object to processing.

To exercise rights, contact: [email protected]. You may also lodge a complaint with the UK Information Commissioner's Office or your local regulator.

16. Security

We implement reasonable technical and organisational safeguards to protect personal data, but no system can be guaranteed secure.

17. Changes to This Policy

We may update this Policy. Changes take effect when posted here with a revised "Last updated" date.

18. Contact

For privacy questions or requests: [email protected]